coindaxe[.]us

This domain, coindaxe.us, is a phishing site designed to impersonate a legitimate cryptocurrency exchange platform. It presents itself as a service for buying, selling, and trading crypto, but its primary objective is to steal user credentials, financial details, or directly drain cryptocurrency wallets. Visitors are lured into entering sensitive information, such as login credentials or private keys, under the guise of account verification or transaction processing. The site may also deploy malicious scripts to interact with connected crypto wallets, leading to unauthorized fund transfers. Analysis indicates the domain is flagged by 6 out of 95 security vendors on VirusTotal, confirming its malicious nature. Infrastructure analysis reveals it resolves to the IP address 51.161.196.101 and uses technologies including PHP, Firebase, and Google Analytics, which are commonly exploited in phishing campaigns. The domain appears on one security blocklist and has been identified in two threat intelligence pulses on AlienVault OTX. The SSL certificate is issued by Let's Encrypt, a detail often leveraged by threat actors to create a false sense of legitimacy. If you visited coindaxe.us, immediately disconnect any connected wallets or devices from the internet to prevent further unauthorized access. Revoke any permissions granted to the site via wallet or browser extensions. Change passwords for all crypto-related accounts, especially if credentials were entered on the site. Monitor financial accounts and crypto wallets for unauthorized transactions and report any suspicious activity to the relevant platform. Consider running a malware scan on your device to detect any potential secondary infections. If funds were stolen, file a report with local law enforcement and relevant cybercrime units.